Commits · aff2ad0df428396704501be7743cc342058ad3a9 · CYBER - Cyber Security / TS 103 523 MSP / TLMSP / TLMSP Apache Httpd

Mar 13, 2002

Doug MacEachern authored Mar 13, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@93892 13f79535-47bb-0310-9956-ffa450edef68

aff2ad0d

remove obsolete ssl_ds_{table,array} api · 02cba2dd

Doug MacEachern authored Mar 13, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@93891 13f79535-47bb-0310-9956-ffa450edef68

02cba2dd

replace ssl_ds_array usage with apr_array_header_t · 68ce3d07

Doug MacEachern authored Mar 13, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@93890 13f79535-47bb-0310-9956-ffa450edef68

68ce3d07

minor ssl_init_CheckServers() enhancements: · f6f254cf

Doug MacEachern authored Mar 13, 2002

- pass the ptemp (temporary pool) so we don't need to create a subpool
  and destroy it ourselves.

- change ssl_ds_table usage to apr_hash_t


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@93887 13f79535-47bb-0310-9956-ffa450edef68

f6f254cf

folding more duplication in ssl_tmp_keys_init · 57d0c4c0

Doug MacEachern authored Mar 13, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@93886 13f79535-47bb-0310-9956-ffa450edef68

57d0c4c0

Mar 12, 2002

cleanup tmp key callbacks. each had assigned the same (1024 bit) value · a5b174c2

Doug MacEachern authored Mar 12, 2002

in 3 different places.  the old code did nothing special in the case
of the export flag either.

add an ssl_log in each to trace when keys are being handed out.

add some XXX comments.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@93885 13f79535-47bb-0310-9956-ffa450edef68

a5b174c2

for the sake of readablity, · b19c0842

Doug MacEachern authored Mar 12, 2002

change: SSL_TKPIDX_{DH,RSA}{512,1024}
to: SSL_TMP_KEY_{DH,RSA}_{512,1024}

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@93883 13f79535-47bb-0310-9956-ffa450edef68

b19c0842

split ssl_init_TmpKeysHandle function to init/free functions, · 96a88dd9

Doug MacEachern authored Mar 12, 2002

and make them static to ssl_engine_init.c


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@93882 13f79535-47bb-0310-9956-ffa450edef68

96a88dd9

it is not required that temporary keys survive restarts, since they · 8b30c237

Doug MacEachern authored Mar 12, 2002

are generated and destroyed on every restart.

so get rid of SSLModConfigRec.tTmpKeys table and mess that was
managing it.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@93881 13f79535-47bb-0310-9956-ffa450edef68

8b30c237

remove version checks for using EGD · aff64872

Doug MacEachern authored Mar 12, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@93879 13f79535-47bb-0310-9956-ffa450edef68

aff64872

remove call to legacy X509V3_add_standard_extensions() function, · bba714d9

Doug MacEachern authored Mar 12, 2002

not needed with OpenSSL 0.9.6+


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@93878 13f79535-47bb-0310-9956-ffa450edef68

bba714d9

we require OpenSSL 0.9.6+ · 2daa09c8

Doug MacEachern authored Mar 12, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@93877 13f79535-47bb-0310-9956-ffa450edef68

2daa09c8

removing unused ssl_init_ChildKill · 35821733

Doug MacEachern authored Mar 12, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@93875 13f79535-47bb-0310-9956-ffa450edef68

35821733

making ssl_init_SSLLibrary() static · a99886e5

Doug MacEachern authored Mar 12, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@93874 13f79535-47bb-0310-9956-ffa450edef68

a99886e5

cleanup version component construction. · 9bb0faec

Doug MacEachern authored Mar 12, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@93873 13f79535-47bb-0310-9956-ffa450edef68

9bb0faec

fold duplication of SSL{Proxy}VerifyDepth directives into · 704e610a

Doug MacEachern authored Mar 12, 2002

ssl_cmd_verify_depth_parse function.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@93872 13f79535-47bb-0310-9956-ffa450edef68

704e610a

Fixed a type mismatch · 5813400b

Bradley Nicholes authored Mar 12, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@93871 13f79535-47bb-0310-9956-ffa450edef68

5813400b

moving SSLVerifyClient directive parsing into ssl_cmd_verify_parse · e9ee30da

Doug MacEachern authored Mar 12, 2002

function, which can also be used for SSLProxyVerify directive.

dropping support for undocumented integer form of levels (0..3)

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@93870 13f79535-47bb-0310-9956-ffa450edef68

e9ee30da

Added NetWare to the ifdef list · 10e208de

Bradley Nicholes authored Mar 12, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@93869 13f79535-47bb-0310-9956-ffa450edef68

10e208de

fold duplication of SSL{Proxy}Protocol directives into · a1d62b1e

Doug MacEachern authored Mar 12, 2002

ssl_cmd_protocol_parse function.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@93865 13f79535-47bb-0310-9956-ffa450edef68

a1d62b1e

fold some duplication of server certs/keys directive checking into · 3db2f7d8

Doug MacEachern authored Mar 12, 2002

ssl_cmd_check_aidx_max function.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@93864 13f79535-47bb-0310-9956-ffa450edef68

3db2f7d8

folding some command handler duplication into two generic functions: · ea436886

Doug MacEachern authored Mar 12, 2002

ssl_cmd_check_file and ssl_cmd_check_dir.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@93863 13f79535-47bb-0310-9956-ffa450edef68

ea436886

get rid of some warnings for currently unused/unprototyped functions. · 4230b447

Doug MacEachern authored Mar 12, 2002

(we can actually compile mod_ssl with -Werror if -Wstrict-prototypes
is taken out)


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@93862 13f79535-47bb-0310-9956-ffa450edef68

4230b447

minor performance enhancement: no need to use md5 of VHostID for the · 72681eaa

Doug MacEachern authored Mar 12, 2002

session id, just use the VHostID itself.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@93861 13f79535-47bb-0310-9956-ffa450edef68

72681eaa

dropping hungarian notation · a5e885d5

Doug MacEachern authored Mar 12, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@93860 13f79535-47bb-0310-9956-ffa450edef68

a5e885d5

minor style changes · 7ed6d145

Doug MacEachern authored Mar 12, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@93859 13f79535-47bb-0310-9956-ffa450edef68

7ed6d145

dropping hungarian notation · 869c3b19

Doug MacEachern authored Mar 12, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@93851 13f79535-47bb-0310-9956-ffa450edef68

869c3b19

various style fixups / general changes to make code more readable. · afb75e5d

Doug MacEachern authored Mar 12, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@93848 13f79535-47bb-0310-9956-ffa450edef68

afb75e5d

various style fixups / general changes to make code more readable. · 2816b559

Doug MacEachern authored Mar 12, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@93847 13f79535-47bb-0310-9956-ffa450edef68

2816b559

add SSL_VERIFY_PEER_STRICT shortcut for often used flags · ba36e087

Doug MacEachern authored Mar 12, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@93846 13f79535-47bb-0310-9956-ffa450edef68

ba36e087

various style fixups / general changes to make code more readable. · 4540ef0a

Doug MacEachern authored Mar 12, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@93845 13f79535-47bb-0310-9956-ffa450edef68

4540ef0a

Mar 10, 2002

no need to call SSL_clear() after SSL_new() · b4e921bd

Doug MacEachern authored Mar 10, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@93824 13f79535-47bb-0310-9956-ffa450edef68

b4e921bd

don't allocate SSLConnRec unless ssl is enabled on this vhost. · c6c229fd

Doug MacEachern authored Mar 10, 2002

also provides a shorter shortcut for mod_ssl hooks to decline if ssl
is not enabled.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@93823 13f79535-47bb-0310-9956-ffa450edef68

c6c229fd

Mar 08, 2002

support reuse of encrypted DSA keys on restart · 107f4274

Doug MacEachern authored Mar 08, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@93799 13f79535-47bb-0310-9956-ffa450edef68

107f4274

remove unused ap_server_ctx member from SSLSrvConfigRec · b8194772

Doug MacEachern authored Mar 08, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@93785 13f79535-47bb-0310-9956-ffa450edef68

b8194772

Mar 06, 2002

apr-utils rename apr_ansi_time_to_apr_time and · 6435b17c

Ian Holsman authored Mar 06, 2002

apr_exploded_time_t.

PR:
Obtained from:
Submitted by:	Thom May <thom@planetarytramp.net>
Reviewed by:	Ian Holsman


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@93733 13f79535-47bb-0310-9956-ffa450edef68

6435b17c

Mar 03, 2002

reuse existing private key if possible for all SSLPassPhraseDialog · af2268d8

Doug MacEachern authored Mar 03, 2002

types, not just builtin.  on win32 for example, a pipe dialog might
allocate a wintty for prompting, which results in 4 prompts at
startup, 2 for each child and 2 within each when httpd "restarts
itself".
update comments on this and wrap them a bit.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@93679 13f79535-47bb-0310-9956-ffa450edef68

af2268d8

Mar 01, 2002

s/const void/const char/g in ssl_asn1_table api · 2882cebd

Doug MacEachern authored Mar 01, 2002

pointed out by gstein


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@93653 13f79535-47bb-0310-9956-ffa450edef68

2882cebd

Consensus is that we should not use the scoreboard as a source of entropy. · 0856d72f

Cliff Woolley authored Mar 01, 2002

Reviewed by: OtherBill, Justin, Madhu


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@93652 13f79535-47bb-0310-9956-ffa450edef68

0856d72f

Feb 28, 2002

plug leak in newish ssl_asn1_table_set() function · d0da5b0e

Doug MacEachern authored Feb 28, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@93648 13f79535-47bb-0310-9956-ffa450edef68

d0da5b0e